Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/931702-c2dc-409e-b3ec-f3ba742d5040/1/_uXfTWBHvAq-eZp3LAhSusWN9Dg.mft
File: _uXfTWBHvAq-eZp3LAhSusWN9Dg.mft (raw, json)
Hash identifier: 9RdGlawrsbhYQMY0CCiJ93FwT/kV3kMe4AGXWQQb4mI=
Subject key identifier: DF:A4:EB:98:F7:DC:B8:0D:B1:B8:C7:D3:64:13:A1:08:FB:6F:35:E2
Authority key identifier: FE:E5:DF:4D:60:47:BC:0A:BE:79:9A:77:2C:08:52:BA:C5:8D:F4:38
Certificate issuer: /CN=fee5df4d6047bc0abe799a772c0852bac58df438
Certificate serial: 01992367D0FFF4465A38B0E60C98E93D9B1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_uXfTWBHvAq-eZp3LAhSusWN9Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/931702-c2dc-409e-b3ec-f3ba742d5040/1/_uXfTWBHvAq-eZp3LAhSusWN9Dg.mft
Manifest number: 49
Signing time: Sun 07 Sep 2025 09:00:30 +0000
Manifest this update: Sun 07 Sep 2025 09:00:30 +0000
Manifest next update: Mon 08 Sep 2025 09:00:30 +0000
Files and hashes: 1: _uXfTWBHvAq-eZp3LAhSusWN9Dg.crl (hash: B0Y5norjrpkW1KoGQ3tTZN605c9DBejgzdaNSrdc1Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/931702-c2dc-409e-b3ec-f3ba742d5040/1/_uXfTWBHvAq-eZp3LAhSusWN9Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/931702-c2dc-409e-b3ec-f3ba742d5040/1/_uXfTWBHvAq-eZp3LAhSusWN9Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_uXfTWBHvAq-eZp3LAhSusWN9Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:67:d0:ff:f4:46:5a:38:b0:e6:0c:98:e9:3d:9b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fee5df4d6047bc0abe799a772c0852bac58df438
Validity
Not Before: Sep 7 09:00:30 2025 GMT
Not After : Sep 8 09:00:30 2025 GMT
Subject: CN=dfa4eb98f7dcb80db1b8c7d36413a108fb6f35e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ca:11:4d:75:c2:80:00:82:cf:14:47:1c:a2:
8d:e0:58:85:fe:12:c6:1b:71:bb:c5:41:76:9f:17:
79:85:e9:42:0a:f2:30:8b:9a:43:3b:42:73:43:21:
13:bc:63:bd:07:52:1f:16:84:1d:a1:f9:d4:f2:28:
79:f2:d6:be:0d:94:9f:82:db:cb:fd:94:cd:15:e1:
4d:5b:a4:d6:8a:12:f9:5e:ae:c8:6c:38:6b:a2:e7:
ee:f8:1d:03:5b:39:f7:2f:87:77:65:5b:05:32:a8:
13:26:58:fa:c2:49:7e:86:3a:af:7b:99:64:9e:5b:
2d:7a:77:d7:ba:4e:05:d2:1e:2b:71:47:e8:6e:e5:
e7:03:dd:48:77:68:d8:e5:ed:f4:24:4d:c5:17:d9:
c7:27:d6:c8:f4:7a:a1:29:2b:00:1c:7e:71:f7:0d:
ee:f1:a0:3d:91:9a:07:6e:2c:31:07:26:7a:6c:cd:
e2:8c:5f:d8:d7:1f:e7:96:63:11:34:fc:82:ad:a8:
17:1f:84:2a:6b:25:db:ac:b8:48:f7:1d:91:5a:45:
85:ba:1c:50:07:4e:15:42:2f:46:7e:9f:4c:8b:23:
fc:4f:4d:e5:fd:ff:d6:4a:24:ec:c1:00:43:88:65:
38:56:71:ac:30:05:67:31:a4:23:6e:70:c2:cc:6e:
f7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A4:EB:98:F7:DC:B8:0D:B1:B8:C7:D3:64:13:A1:08:FB:6F:35:E2
X509v3 Authority Key Identifier:
keyid:FE:E5:DF:4D:60:47:BC:0A:BE:79:9A:77:2C:08:52:BA:C5:8D:F4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_uXfTWBHvAq-eZp3LAhSusWN9Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/931702-c2dc-409e-b3ec-f3ba742d5040/1/_uXfTWBHvAq-eZp3LAhSusWN9Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/931702-c2dc-409e-b3ec-f3ba742d5040/1/_uXfTWBHvAq-eZp3LAhSusWN9Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f8:0e:da:ee:a9:49:0e:68:a5:50:38:f2:90:97:8a:71:9a:
78:f8:40:c1:ba:54:89:79:80:1a:87:db:4a:23:03:7a:48:5f:
30:80:12:40:c2:af:0a:0a:24:43:8d:5f:99:1c:7c:14:49:6e:
db:e9:ad:18:fb:6f:e7:80:b8:c5:c0:56:2f:70:03:ce:96:9d:
c7:84:d3:fb:86:31:6f:87:9d:9e:f7:0d:5d:11:9c:c0:c4:50:
6f:6b:32:c3:a4:07:bc:84:89:08:1e:f1:cb:5c:20:9c:9d:a0:
db:53:58:43:74:58:c3:79:63:6c:6b:7c:8a:f6:6d:af:74:c6:
78:a7:51:32:24:78:66:c2:ae:03:d2:6c:67:ef:4e:6a:5a:ad:
ac:a0:3d:d9:22:74:a1:d1:a3:92:b2:ff:f8:15:25:2b:e6:d6:
03:e1:c6:68:d2:eb:ce:5b:2b:0c:c0:0a:18:17:7f:e6:4f:6b:
aa:56:75:98:52:dc:31:2b:40:e0:38:2f:3b:cf:9d:ed:0a:07:
6a:64:f4:dc:cc:3a:c3:28:bd:e0:be:00:33:3e:80:9e:fb:a5:
41:da:2c:b9:f5:4a:ba:0d:a8:e4:65:e4:8d:9e:00:2b:e8:4b:
2c:af:14:dc:77:02:52:b1:11:1e:9e:37:08:30:9d:f8:2b:44:
6f:81:0b:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjZ9D/9EZaOLDmDJjpPZseMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZTVkZjRkNjA0N2JjMGFiZTc5OWE3NzJjMDg1MmJhYzU4
ZGY0MzgwHhcNMjUwOTA3MDkwMDMwWhcNMjUwOTA4MDkwMDMwWjAzMTEwLwYDVQQD
EyhkZmE0ZWI5OGY3ZGNiODBkYjFiOGM3ZDM2NDEzYTEwOGZiNmYzNWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8oRTXXCgACCzxRHHKKN4FiF/hLG
G3G7xUF2nxd5helCCvIwi5pDO0JzQyETvGO9B1IfFoQdofnU8ih58ta+DZSfgtvL
/ZTNFeFNW6TWihL5Xq7IbDhroufu+B0DWzn3L4d3ZVsFMqgTJlj6wkl+hjqve5lk
nlstenfXuk4F0h4rcUfobuXnA91Id2jY5e30JE3FF9nHJ9bI9HqhKSsAHH5x9w3u
8aA9kZoHbiwxByZ6bM3ijF/Y1x/nlmMRNPyCragXH4QqayXbrLhI9x2RWkWFuhxQ
B04VQi9Gfp9MiyP8T03l/f/WSiTswQBDiGU4VnGsMAVnMaQjbnDCzG73RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+k65j33LgNsbjH02QToQj7bzXiMB8GA1UdIwQY
MBaAFP7l301gR7wKvnmadywIUrrFjfQ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3VYZlRXQkh2QXEtZVpwM0xBaFN1c1dOOURnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS85MzE3MDItYzJkYy00MDllLWIzZWMt
ZjNiYTc0MmQ1MDQwLzEvX3VYZlRXQkh2QXEtZVpwM0xBaFN1c1dOOURnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS85MzE3MDItYzJkYy00MDllLWIzZWMtZjNiYTc0MmQ1MDQw
LzEvX3VYZlRXQkh2QXEtZVpwM0xBaFN1c1dOOURnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiPgO2u6p
SQ5opVA48pCXinGaePhAwbpUiXmAGofbSiMDekhfMIASQMKvCgokQ41fmRx8FElu
2+mtGPtv54C4xcBWL3ADzpadx4TT+4Yxb4ednvcNXRGcwMRQb2syw6QHvISJCB7x
y1wgnJ2g21NYQ3RYw3ljbGt8ivZtr3TGeKdRMiR4ZsKuA9JsZ+9OalqtrKA92SJ0
odGjkrL/+BUlK+bWA+HGaNLrzlsrDMAKGBd/5k9rqlZ1mFLcMStA4DgvO8+d7QoH
amT03Mw6wyi94L4AMz6AnvulQdosufVKug2o5GXkjZ4AK+hLLK8U3HcCUrERHp43
CDCd+CtEb4ELEg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:33 2025 by rpki-client